TRUST CENTRE

Safety & Security

Mad Cat follows Apple’s permission model. It does not bypass restrictions; it makes user-approved file movement easier.

Permission boundaries

No WhatsApp, Apple or Google password is requested by Mad Cat.
No full Photos, Contacts, Camera, Microphone or Location permission is requested.
The Share Extension receives only the files selected in the current Share Sheet.
File and Drive access uses Apple’s system interfaces and provider authentication.

Local-first architecture

Imported items and ZIP creation stay in the app sandbox. The app has no advertising or analytics SDK. The Share Extension and main app exchange files only through their private Apple App Group container.

Recognize unsafe requests

Mad Cat support will not ask for a WhatsApp verification code, Apple Account password, Google password, device passcode or a copy of private chat exports. Report suspicious messages to informjubiday@gmail.com.

Responsible reporting

For a potential security issue, email the steps to reproduce, affected version and impact. Do not include real private chats. We will investigate and prioritize issues that could expose user files.